$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/9721a2b0-73bd-3612-b051-3fefdae4d925.roa File: 9721a2b0-73bd-3612-b051-3fefdae4d925.roa (raw, json) Hash identifier: tnP5TxT1L14lFLbzZRpBSChDiyTgKS6TXuUpXlnonsY= Subject key identifier: E2:2D:21:4B:0A:4E:4E:45:0F:B7:E7:B0:BE:E8:54:24:B9:39:5E:2A Certificate issuer: /CN=9de5b47f-bd49-4614-b658-9980cfd17769 Certificate serial: 010D0C9F4328584DC40051F2525628B238811B00 Authority key identifier: 8F:18:8B:18:ED:B5:79:23:55:FB:B9:BF:06:56:0A:D3:E2:01:A4:37 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/9721a2b0-73bd-3612-b051-3fefdae4d925.roa Signing time: Fri 08 May 2026 13:00:30 +0000 ROA not before: Fri 08 May 2026 13:00:30 +0000 ROA not after: Thu 06 Aug 2026 13:00:30 +0000 asID: 19637 IP address blocks: 192.19.66.0/24 maxlen: 24 192.19.196.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/9de5b47f-bd49-4614-b658-9980cfd17769.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/9de5b47f-bd49-4614-b658-9980cfd17769.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:c4:00:51:f2:52:56:28:b2:38:81:1b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9de5b47f-bd49-4614-b658-9980cfd17769 Validity Not Before: May 8 13:00:30 2026 GMT Not After : Aug 6 13:00:30 2026 GMT Subject: CN=4696e8d2-c9ce-455e-97d9-27cd2326b8fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:52:3c:82:9e:a7:1f:3b:48:85:25:c9:89:cf: f0:c7:db:6e:56:58:9c:a4:0a:5e:98:82:17:92:7a: af:70:73:9b:f7:98:0e:49:e2:0f:78:ab:d5:ad:a7: 4a:ee:76:2c:dc:bb:ce:e9:c6:a1:9b:58:42:d3:4f: 69:8e:3a:0b:a8:21:82:20:b2:38:90:84:02:88:3b: c3:18:31:9e:67:cb:d1:d6:c7:28:46:69:5c:ef:71: aa:1b:72:28:9f:8f:bd:98:5b:1c:22:0a:0c:f4:b0: 53:f4:90:a0:a5:b7:03:cf:b4:a2:a7:2b:18:e8:28: df:79:d3:30:b5:21:f7:da:73:a8:e3:36:ab:a9:6c: 2d:c4:c0:2d:43:55:d3:60:5b:0a:8b:61:c0:24:1a: e7:d2:57:41:b7:26:78:78:b6:97:72:bf:9a:26:fb: 1c:47:b3:63:15:30:67:9e:14:82:f6:1c:fb:13:08: 0c:da:05:ec:f1:49:a2:00:19:8d:2b:8b:67:09:67: 40:a1:fb:15:20:3a:b6:b2:83:5b:b4:bf:18:4e:ff: f3:1a:b2:77:25:3d:f1:55:2d:81:69:c7:a0:df:9f: 01:88:66:dc:2f:9b:c3:45:89:9b:42:e9:d8:7e:d8: b4:06:26:80:b9:d9:d5:98:bd:e1:c9:c1:0f:06:24: f1:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:2D:21:4B:0A:4E:4E:45:0F:B7:E7:B0:BE:E8:54:24:B9:39:5E:2A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/9721a2b0-73bd-3612-b051-3fefdae4d925.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/9de5b47f-bd49-4614-b658-9980cfd17769.crl X509v3 Authority Key Identifier: keyid:8F:18:8B:18:ED:B5:79:23:55:FB:B9:BF:06:56:0A:D3:E2:01:A4:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769.cer sbgp-ipAddrBlock: critical IPv4: 192.19.66.0/24 192.19.196.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:fe:39:af:e1:5b:88:34:70:65:10:23:69:5a:dc:7e:e0:21: 57:6e:f7:9f:7d:af:2c:44:80:a9:9a:c7:28:b8:ca:dd:d4:84: 71:2f:f3:8b:93:05:97:14:70:98:49:54:b1:00:db:8d:22:f6: da:2b:54:f0:17:92:9c:90:cc:c4:6b:c3:1e:9c:96:eb:0b:57: 78:6c:60:53:63:05:4c:b3:f8:67:9e:87:1e:3f:3f:cd:5b:0a: d0:0f:34:31:0c:3f:30:76:4d:12:d9:d5:2f:9a:56:20:41:f1: e5:35:c8:ed:3d:6b:53:43:7a:c0:0e:04:c8:c8:47:d6:5d:cf: f8:ca:b8:84:05:c1:f6:4c:24:c7:1b:f4:a3:47:2a:92:5a:90: 65:0a:75:9f:82:ce:6a:d2:e8:64:e3:42:85:e9:97:46:c6:03: 48:4d:a2:81:e2:1b:c6:e3:2e:a8:ef:d2:90:20:0a:89:1b:40: a7:80:55:50:ac:54:0f:c9:21:da:e8:26:13:18:eb:36:9b:fe: 5d:d0:05:4f:4f:62:ec:7a:a8:f6:f5:57:60:f9:96:c3:43:4f: bb:95:d0:39:94:4e:ad:2b:16:81:a1:31:86:75:57:ae:e5:f3: 7c:58:01:00:71:b9:47:98:32:e3:e2:8c:28:29:17:5e:72:97: 5f:29:cd:5a -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE3EAFHyUlYosjiBGwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWRlNWI0N2YtYmQ0OS00NjE0LWI2NTgtOTk4MGNmZDE3 NzY5MB4XDTI2MDUwODEzMDAzMFoXDTI2MDgwNjEzMDAzMFowLzEtMCsGA1UEAxMk NDY5NmU4ZDItYzljZS00NTVlLTk3ZDktMjdjZDIzMjZiOGZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiFI8gp6nHztIhSXJic/wx9tuVlicpApemIIX knqvcHOb95gOSeIPeKvVradK7nYs3LvO6cahm1hC009pjjoLqCGCILI4kIQCiDvD GDGeZ8vR1scoRmlc73GqG3Ion4+9mFscIgoM9LBT9JCgpbcDz7SipysY6CjfedMw tSH32nOo4zarqWwtxMAtQ1XTYFsKi2HAJBrn0ldBtyZ4eLaXcr+aJvscR7NjFTBn nhSC9hz7EwgM2gXs8UmiABmNK4tnCWdAofsVIDq2soNbtL8YTv/zGrJ3JT3xVS2B aceg358BiGbcL5vDRYmbQunYfti0BiaAudnVmL3hycEPBiTxyQIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFOItIUsKTk5FD7fnsL7oVCS5OV4qMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85ZGU1 YjQ3Zi1iZDQ5LTQ2MTQtYjY1OC05OTgwY2ZkMTc3NjkvOTcyMWEyYjAtNzNiZC0z NjEyLWIwNTEtM2ZlZmRhZTRkOTI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOWRlNWI0N2YtYmQ0OS00NjE0LWI2 NTgtOTk4MGNmZDE3NzY5LzlkZTViNDdmLWJkNDktNDYxNC1iNjU4LTk5ODBjZmQx Nzc2OS5jcmwwHwYDVR0jBBgwFoAUjxiLGO21eSNV+7m/BlYK0+IBpDcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS85ZGU1YjQ3Zi1iZDQ5LTQ2MTQtYjY1OC05OTgw Y2ZkMTc3NjkuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAwBNCAwQA wBPEMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBACP+Oa/hW4g0cGUQI2la3H7gIVdu9599ryxEgKmaxyi4yt3U hHEv84uTBZcUcJhJVLEA240i9torVPAXkpyQzMRrwx6clusLV3hsYFNjBUyz+Gee hx4/P81bCtAPNDEMPzB2TRLZ1S+aViBB8eU1yO09a1NDesAOBMjIR9Zdz/jKuIQF wfZMJMcb9KNHKpJakGUKdZ+CzmrS6GTjQoXpl0bGA0hNooHiG8bjLqjv0pAgCokb QKeAVVCsVA/JIdroJhMY6zab/l3QBU9PYux6qPb1V2D5lsNDT7uV0DmUTq0rFoGh MYZ1V67l83xYAQBxuUeYMuPijCgpF15yl18pzVo= -----END CERTIFICATE-----Generated at Wed May 13 12:11:36 2026 by rpki-client